Governance Risk & Compliance Analyst
About The Position
Nelson Mullins, an Am Law 100 law firm, is seeking a Governance, Risk & Compliance (GRC) Analyst to support the firm's information security, vendor risk management, and compliance initiatives. This role serves as a key resource for client security assessments, vendor risk reviews, and audit support activities. The ideal candidate is a proactive problem solver with exceptional communication skills, strong organizational abilities, and a desire to grow within a dynamic and evolving security and compliance environment. In this role, you will manage client security assessments, vendor risk reviews, and compliance-related initiatives while serving as a primary point of contact for attorneys, clients, vendors, and external auditors. You will coordinate third-party attestations and audits, maintain compliance documentation, review vendor security risks, and assist with the development and ongoing maintenance of information security policies and procedures. This position requires the ability to manage multiple concurrent projects, communicate complex compliance concepts to a variety of audiences, proactively identify and address risk gaps, and deliver exceptional client service while supporting the firm's governance and compliance objectives.
Requirements
- Two or more years of experience in governance, risk, compliance, vendor risk management, audit support, or a related function.
- Excellent written and verbal communication skills
- Strong time management abilities
- Self-motivated approach to work
- Desire to expand knowledge within a collaborative team environment
Nice To Haves
- Experience supporting governance, risk, compliance, information security, vendor management, audit support, or a related function.
- Experience with compliance frameworks
- Experience with client security assessments
- Experience with third-party risk management
- Bachelor's degree in information security, Cybersecurity, Business, Risk Management, or a related field
- Experience supporting client security assessments, third-party audits, vendor risk reviews, or compliance programs
- Security+, CISSP, CRISC, ISO 27001 Lead Auditor, or related certifications
Responsibilities
- Manage client security assessments
- Manage vendor risk reviews
- Manage compliance-related initiatives
- Serve as a primary point of contact for attorneys, clients, vendors, and external auditors
- Coordinate third-party attestations and audits
- Maintain compliance documentation
- Review vendor security risks
- Assist with the development and ongoing maintenance of information security policies and procedures
- Manage multiple concurrent projects
- Communicate complex compliance concepts to a variety of audiences
- Proactively identify and address risk gaps
- Deliver exceptional client service while supporting the firm's governance and compliance objectives
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
